Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa
File: H1A7uaM54kLOJ6aconq6fZrKspY.roa (raw, json)
Hash identifier: HaFbnxWcvSS0ml56l21x/16ARuwZoe4Nezyvo1RkPbI=
Subject key identifier: 1F:50:3B:B9:A3:39:E2:42:CE:27:A6:9C:A2:7A:BA:7D:9A:CA:B2:96
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E74AC2
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa
Signing time: Sat 01 Jan 2022 10:55:38 +0000
ROA not before: Sat 01 Jan 2022 10:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204150
IP address blocks: 77.78.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820464322 (0x30e74ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f503bb9a339e242ce27a69ca27aba7d9acab296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:76:20:80:22:58:e9:a4:2a:a7:05:a4:c1:
87:12:b2:28:9c:bc:65:bf:d1:96:84:13:a2:9f:79:
4f:7a:2a:2d:16:f3:ad:60:dd:de:00:ba:80:a6:e5:
8d:e8:70:92:09:b6:e1:67:77:e6:b4:66:45:08:ba:
b6:e2:2a:9f:bb:42:47:56:90:97:1d:39:05:5e:e1:
77:37:88:a1:9f:83:e6:06:4c:d3:24:a7:7f:61:12:
02:e7:29:4f:91:67:3e:b9:df:b1:dc:91:e2:e4:ab:
cb:c0:6f:5e:3c:93:47:5a:3b:55:12:bf:45:27:a5:
d1:49:d8:3e:fa:77:2b:60:d6:ee:9b:99:b7:52:00:
c2:a1:32:b8:99:58:43:46:eb:f9:1a:b6:40:d1:7d:
28:52:1a:42:8b:0a:2c:86:77:71:ae:76:99:45:66:
4e:0b:7f:92:6b:67:e0:c5:bd:25:6f:5d:4c:a3:2d:
75:e4:4e:54:25:18:93:77:56:50:d2:cf:23:75:58:
8e:87:c0:cf:df:5b:3e:ef:56:1d:5a:a6:f6:03:91:
26:39:39:01:a0:3d:db:67:68:d5:7e:7c:2f:fe:7d:
81:1b:d4:06:43:3a:aa:da:93:11:6a:a3:db:97:b1:
68:ee:21:5b:a9:9c:aa:2d:07:50:43:1b:8c:d2:b7:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:3B:B9:A3:39:E2:42:CE:27:A6:9C:A2:7A:BA:7D:9A:CA:B2:96
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.144.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9a:d1:62:38:9e:77:f2:4d:20:98:ce:24:3e:e1:07:d3:20:
34:c1:de:82:7c:d8:87:e4:d5:e5:8e:a2:99:6d:cf:36:10:1f:
18:c6:4e:e9:83:af:09:28:ae:58:30:e6:7d:2c:a7:fc:55:28:
4f:59:1c:a7:45:6f:50:83:32:68:f2:4f:42:9f:ed:c8:a3:b8:
94:60:2b:15:3b:65:ac:1a:3c:57:a3:ab:e0:cd:89:a6:5e:a5:
de:e3:30:c4:c5:0e:6c:d3:06:e0:64:24:ce:e2:d0:ad:32:f2:
dd:82:c3:c6:b5:84:ca:7a:85:e3:f0:a3:cf:8a:aa:ae:91:e3:
66:e6:2e:2b:98:bb:60:18:aa:b2:16:ed:97:91:d5:f4:60:fc:
07:7f:ab:97:b8:43:79:25:74:c3:18:56:43:91:1f:69:61:a4:
17:d2:1f:bb:e7:50:3e:d4:9d:7d:51:4b:87:97:a7:32:24:5a:
f8:95:75:19:95:fa:af:04:2a:f0:ca:cf:ad:b4:2a:2b:a2:4d:
d3:2d:9a:b4:92:8b:6f:f8:1b:94:bc:9f:e1:d5:32:e2:e4:4a:
b8:51:80:6c:5b:7e:27:18:3c:1f:b7:82:ca:84:5e:d2:e2:67:
fb:ed:39:a5:67:0b:22:09:2a:52:e8:0c:b8:f6:8c:af:78:d0:
0c:18:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:55 2025 by rpki-client